Cybersecurity Engineer Federal Experience REQUIRED

Business Management Associates, Inc.

6d•Remote

About The Position

The Cybersecurity Engineer III serves as a senior security architect and technical authority responsible for enterprise cybersecurity engineering, Zero Trust architecture implementation, and oversight of the full NIST RMF / ATO lifecycle across complex federal systems. This role leads security design for cloud, on-premise, hybrid, and high-impact systems and provides expert guidance to ISSOs, engineers, and system owners to ensure continuous compliance with FISMA, NIST, FedRAMP, DISA STIGs, and agency security policies. This position is responsible for security architecture, advanced threat defense, and continuous monitoring strategy to maintain and improve the organization's cybersecurity posture across the enterprise.

Requirements

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field (or equivalent experience)
8+ years of progressive cybersecurity engineering experience in federal or highly regulated environments
Deep expertise in NIST RMF, ATO, FISMA, FedRAMP, and Zero Trust
Demonstrated experience designing secure architectures for cloud and hybrid federal systems
Advanced knowledge of network, endpoint, and infrastructure security engineering
Experience leading security remediation for audit findings and penetration tests
Ability to obtain and maintain required security clearance

Nice To Haves

CISSP (preferred)
CISM
CCSP
CEH
Security+
AWS/Azure Security Specialty

Responsibilities

Lead enterprise implementation of security controls aligned to NIST SP 800-53, 800-37, 800-61, 800-171, and Zero Trust Architecture (NIST 800-207)
Serve as senior lead for RMF lifecycle activities and ATO sustainment across multiple systems
Architect and engineer secure solutions across AWS GovCloud, Azure Government, and on-prem environments
Direct development and maintenance of SSPs, POA&Ms, SARs, Security Architectures, and Control Traceability Matrices
Provide advanced engineering and configuration of: SIEM/SOAR (Splunk, Sentinel) EDR/XDR (Defender, CrowdStrike) Vulnerability Management (Tenable, Nessus, Qualys) Firewalls, IDS/IPS, VPNs, NAC solutions
Lead vulnerability assessments, penetration test remediation, and risk mitigation planning
Implement and mature continuous monitoring strategies
Provide oversight and technical leadership for eMASS / Xacta security packages
Lead incident response, digital forensics, and threat hunting initiatives
Interpret and apply DISA STIGs, CIS Benchmarks, and configuration baselines
Mentor junior cybersecurity engineers, ISSOs, and analysts
Support audits, OIG reviews, and 3PAO/FedRAMP assessments
Advise leadership on cybersecurity strategy, risk posture, and architecture roadmaps